Linux “ssh-keysign-pwn” Flaw Exposing Critical Authentication Files

A newly disclosed Linux kernel race-condition (CVE-2026-46333, 'ssh-keysign-pwn') in ptrace_may_access/dumpability lets unprivileged local attackers hijack open file descriptors during process exit, enabling theft of SSH private keys and exposure of /etc/shadow; a public PoC exists and patches have been released for affected kernels and distributions, so administrators should apply kernel updates or restrict local access until patched.